Privacy statement

Version of 28 July 2026 · Terms of Service · Data processing agreement

The short version: a call between two people is never recorded and never reaches us. A conversation with a page's AI assistant is different — that one is written down and passed to the page owner, because that is the entire point of it, and our own copy is deleted after 30 days. Everything below is the long version.

Who is responsible

Confianta EOOD, UIC 207288781, registered office Detelina 49A, 9101 Byala, Varna, Bulgaria, is the controller for the OneDo.me service itself: page owners' accounts, the pages, billing and the running of the site. Contact: support@confianta.com.

For what a caller tells a page's AI assistant, the roles are the other way round: the page owner is the controller and we are the processor acting on their behalf. What that means in practice is set out in the data processing agreement. If you called a business through OneDo.me and want your data removed, the fastest route is that business — but you can also write to us and we will pass it on and act on it.

1. If you call another person

The audio and video run encrypted directly between the two browsers. We cannot listen in and we store nothing of the conversation. On some corporate networks a direct connection is impossible; the encrypted audio then passes through our relay server, which forwards it without being able to open it and without keeping it.

What we do handle is the little that is needed to connect you: your IP address and technical connection details pass through our server for the duration of the call, and the fact that a call took place may appear in short-lived server logs. Not the conversation itself.

If you type something in the in-call chat, it travels the same direct route and disappears when the call ends.

2. If you speak to a page's AI assistant

Here we do process the content, because the message has to reach the page owner:

Your speech is transcribed live. The audio itself is processed for that purpose and is not kept.
The transcript — what you said and what the assistant answered, including any name, phone number, email address or other detail you give — is sent to the page owner by email and shown in their owner panel.
Our own copy of the transcript is deleted after 30 days. The copy in the page owner's mailbox is theirs; how long they keep it is up to them and their own privacy policy.
We also record how long the conversation took and what it cost us, so the page owner's minutes can be counted. That administration holds no conversation content.

The assistant tells you at the start that it is a digital assistant, and the page says that the conversation is passed on as text. If you would rather not have that, do not continue the conversation — most pages let you reach a human directly instead.

3. If you own a page

Your page: the name, description, opening hours, links, images and assistant instructions you enter. Public by design.
Access: an owner key stored in your browser, and — if you sign in with Google — your name, email address and Google account ID, so your page follows you to another device. We never see your Google password.
Billing: if you subscribe, your name, email address, country, any VAT number, and the payment records. Card details never touch our server; Stripe handles them.
Usage: calls, minutes and cost per session, for your counter, your weekly summary email and our own administration.
Notifications: if you turn on push notifications, a browser subscription so we can ring you; if you give us a phone number, an SMS when your page approaches its daily limit.

4. Everyone who visits the site

Our web server keeps standard access logs — IP address, time, page requested, browser type — which are rotated away after 14 days. They exist to keep the service running and to spot abuse. When you claim a page name we may show a Cloudflare Turnstile check; that is there to keep bulk claiming out and it does not track you across websites.

We use no advertising cookies and no analytics that follow you around the web. What we store in your browser is functional only: your owner key, your page preferences, and a login session cookie if you sign in with Google.

5. How long we keep things

What	How long
Person-to-person call content	Not stored at all
AI conversation transcripts (our copy)	30 days
Minutes and cost records	As long as needed for billing and as long as tax law requires us to keep our books
Your page and account	Until you delete the page, or it lapses after six months of inactivity
Invoices and payment records	As required by accounting and tax law
Web server logs	14 days

6. Why we are allowed to do this

To perform our contract with you — running your page, connecting your calls, taking payment.
Legitimate interest — keeping the service secure, preventing abuse, and keeping short server logs.
Legal obligation — keeping accounts and tax records.
For conversations with an assistant we act on the page owner's instructions; the legal basis for that processing is theirs to have.

7. Who else is involved

We keep the list short on purpose. These are the companies that process data as part of delivering OneDo.me:

Who	What for	Where
Google (Gemini Live)	Speech and conversation for the assistant in some languages	EU / US
Deepgram	Speech recognition and speech for the assistant in other languages	US
OpenAI	The language model used inside the Deepgram pipeline to form answers	US
Stripe	Payments, subscriptions and invoices	EU / US
Resend	Sending email — transcripts, weekly summaries	EU / US
Twilio	SMS alerts to page owners	EU / US
Cal.com	Appointment booking, for pages that switch it on	EU / US
Cloudflare	Turnstile anti-abuse check on the claim form	Global
Google / Mozilla / Apple push services	Delivering a ring notification to your device, if you enable it	Global
Hostinger International Ltd	The server the service runs on, including the call relay	Germany (Frankfurt)

Where a provider processes data outside the European Economic Area, that transfer rests on the European Commission's standard contractual clauses or on an adequacy decision. We do not sell data to anyone, and we do not use your conversations to train our own models.

8. Security

Traffic to and from the site runs over HTTPS, call audio is encrypted end to end between browsers, and access to the server is limited to the people who need it to run it — in practice a very short list. No system is perfect; if a breach ever affects your data, we will tell you and the supervisory authority as the law requires.

9. Your rights

You can ask us for a copy of the data we hold about you, to correct it, to delete it, to limit what we do with it, to receive it in a portable form, or to object to processing based on legitimate interest. Write to support@confianta.com and we will answer within a month.

If you are unhappy with how we handle it, you can complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the supervisory authority in the country you live in.

10. Changes

If this statement changes in a way that matters, we say so on the site and, for paying customers, by email. The version date is at the top.